GRC Analyst

GRC Analyst

Location: Manchester, Hybrid 80% remote, 20% onsite

Duration: 31/10/2031

Rate - £480 - £520

CONTRACTOR MUST BE SC CLEARED (active) AND BE A SOLE UK NATIONAL

The candidate hasn't been outside the UK for more than 28 consecutive days during the past 5 years

MUST BE PAYE THROUGH UMBRELLA

• Maintain oversight of cyber security risks across suppliers
• Ensure risks are: Identified, Assessed, Recorded, Tracked & Escalated appropriately
• Govern risk acceptance and exception management processes
• Support risk-based prioritisation across security disciplines
• Coordinate supplier compliance activities within the SIAM framework
• Validate supplier adherence to agreed security requirements
• Monitor security performance against contractual obligations
• Drive accountability for control weaknesses, non-compliance, and improvement actions
• Maintain visibility of compliance obligations and control requirements
• Support compliance against frameworks and standards such as:
• ISO 27001, NIST CSF, NCSC guidance & Secure by Design principles
• Coordinate remediation of identified compliance gaps
• Produce consolidated security governance reporting
• Provide visibility of: Security risks, Compliance status, Control effectiveness, Supplier performance & Assurance findings
• Present governance information to client stakeholders and governance forums
• Support strategic planning and risk-informed decision making
• Drive security governance maturity improvements across the supplier landscape
• Identify opportunities to improve: Risk management, Compliance processes & Assurance effectiveness
• Security governance practices
• Support continuous improvement programmes across the cyber security operating model
• Facilitate cross-supplier resolution of governance issues